{"total":132,"rows":[{"id":"2112.03570","title":"Membership Inference Attacks From First Principles","created":"2021-12-07","cited_by_count":878,"area":"safety"},{"id":"2407.06460","title":"MUSE: Machine Unlearning Six-Way Evaluation for Language Models","created":"2024-07-08","cited_by_count":261,"area":"safety"},{"id":"2305.18462","title":"Membership Inference Attacks against Language Models via Neighbourhood Comparison","created":"2023-05-29","cited_by_count":258,"area":"safety"},{"id":"2402.07841","title":"Do Membership Inference Attacks Work on Large Language Models?","created":"2024-02-12","cited_by_count":195,"area":"safety"},{"id":"2402.00888","title":"Security and Privacy Challenges of Large Language Models: A Survey","created":"2024-01-30","cited_by_count":186,"area":"safety"},{"id":"2203.03929","title":"Quantifying Privacy Risks of Masked Language Models Using Membership Inference Attacks","created":"2022-03-08","cited_by_count":175,"area":"safety"},{"id":"2312.03262","title":"Low-Cost High-Power Membership Inference Attacks","created":"2023-12-06","cited_by_count":107,"area":"safety"},{"id":"2208.14933","title":"Membership Inference Attacks by Exploiting Loss Trajectory","created":"2022-08-31","cited_by_count":101,"area":"safety"},{"id":"2311.06062","title":"Practical Membership Inference Attacks against Fine-tuned Large Language Models via Self-prompt Calibration","created":"2023-11-10","cited_by_count":98,"area":"safety"},{"id":"2403.01218","title":"Inexact Unlearning Needs More Careful Evaluations to Avoid a False Sense of Privacy","created":"2024-03-02","cited_by_count":82,"area":"safety"},{"id":"2302.12580","title":"Membership Inference Attacks against Synthetic Data through Overfitting Detection","created":"2023-02-24","cited_by_count":66,"area":"safety"},{"id":"2307.03694","title":"Scalable Membership Inference Attacks via Quantile Regression","created":"2023-07-07","cited_by_count":65,"area":"safety"},{"id":"2406.17975","title":"SoK: Membership Inference Attacks on LLMs are Rushing Nowhere (and How to Fix It)","created":"2024-06-25","cited_by_count":59,"area":"safety"},{"id":"2409.19798","title":"Membership Inference Attacks Cannot Prove that a Model Was Trained On Your Data","created":"2024-09-29","cited_by_count":50,"area":"safety"},{"id":"2409.01380","title":"Membership Inference Attacks Against In-Context Learning","created":"2024-09-02","cited_by_count":43,"area":"safety"},{"id":"2505.11953","title":"Exploring Criteria of Loss Reweighting to Enhance LLM Unlearning","created":"2025-05-17","cited_by_count":39,"area":"safety"},{"id":"2502.18943","title":"Towards Label-Only Membership Inference Attack against Pre-trained Large Language Models","created":"2025-02-26","cited_by_count":37,"area":"safety"},{"id":"2206.05199","title":"Bayesian Estimation of Differential Privacy","created":"2022-06-10","cited_by_count":33,"area":"safety"},{"id":"2211.05427","title":"On the Privacy Risks of Algorithmic Recourse","created":"2022-11-10","cited_by_count":32,"area":"safety"},{"id":"2307.01610","title":"Overconfidence is a Dangerous Thing: Mitigating Membership Inference Attacks by Enforcing Less Confident Prediction","created":"2023-07-04","cited_by_count":29,"area":"safety"},{"id":"2403.09562","title":"PreCurious: How Innocent Pre-Trained Language Models Turn into Privacy Traps","created":"2024-03-14","cited_by_count":23,"area":"safety"},{"id":"2407.15098","title":"SeqMIA: Sequential-Metric Based Membership Inference Attack","created":"2024-07-21","cited_by_count":23,"area":"safety"},{"id":"2409.13745","title":"Context-Aware Membership Inference Attacks against Pre-trained Large Language Models","created":"2024-09-11","cited_by_count":22,"area":"safety"},{"id":"2306.07273","title":"Gaussian Membership Inference Privacy","created":"2023-06-12","cited_by_count":21,"area":"safety"},{"id":"2409.00426","title":"Is Difficulty Calibration All We Need? Towards More Practical Membership Inference Attacks","created":"2024-08-31","cited_by_count":21,"area":"safety"},{"id":"2206.03317","title":"Subject Membership Inference Attacks in Federated Learning","created":"2022-06-07","cited_by_count":20,"area":"safety"},{"id":"2205.14055","title":"A Blessing of Dimensionality in Membership Inference through Regularization","created":"2022-05-27","cited_by_count":18,"area":"safety"},{"id":"2505.13312","title":"GUARD: Generation-time LLM Unlearning via Adaptive Restriction and Detection","created":"2025-05-19","cited_by_count":17,"area":"safety"},{"id":"2406.07687","title":"Adversarial Machine Unlearning","created":"2024-06-11","cited_by_count":16,"area":"safety"},{"id":"2401.10458","title":"Contrastive Unlearning: A Contrastive Approach to Machine Unlearning","created":"2024-01-19","cited_by_count":15,"area":"safety"},{"id":"2202.01243","title":"Parameters or Privacy: A Provable Tradeoff Between Overparameterization and Membership Inference","created":"2022-02-02","cited_by_count":14,"area":"safety"},{"id":"2309.07983","title":"SLMIA-SR: Speaker-Level Membership Inference Attacks against Speaker Recognition Systems","created":"2023-09-14","cited_by_count":14,"area":"safety"},{"id":"2403.02116","title":"Inf2Guard: An Information-Theoretic Framework for Learning Privacy-Preserving Representations against Inference Attacks","created":"2024-03-04","cited_by_count":13,"area":"safety"},{"id":"2405.16978","title":"OSLO: One-Shot Label-Only Membership Inference Attacks","created":"2024-05-27","cited_by_count":13,"area":"safety"},{"id":"2410.07582","title":"Detecting Training Data of Large Language Models via Expectation Maximization","created":"2024-10-10","cited_by_count":13,"area":"safety"},{"id":"2302.06676","title":"Netflix and Forget: Efficient and Exact Machine Unlearning from Bi-linear Recommendations","created":"2023-02-13","cited_by_count":12,"area":"safety"},{"id":"2311.00919","title":"MIST: Defending Against Membership Inference Attacks Through Membership-Invariant Subspace Training","created":"2023-11-02","cited_by_count":12,"area":"safety"},{"id":"2408.05131","title":"Range Membership Inference Attacks","created":"2024-08-09","cited_by_count":12,"area":"safety"},{"id":"2505.01524","title":"The DCR Delusion: Measuring the Privacy Risk of Synthetic Data","created":"2025-05-02","cited_by_count":11,"area":"safety"},{"id":"2506.06112","title":"Towards Lifecycle Unlearning Commitment Management: Measuring Sample-level Unlearning Completeness","created":"2025-06-06","cited_by_count":11,"area":"safety"},{"id":"2506.13972","title":"Membership Inference Attacks as Privacy Tools: Reliability, Disparity and Ensemble","created":"2025-06-16","cited_by_count":11,"area":"safety"},{"id":"2509.02820","title":"Unlearning That Lasts: Utility-Preserving, Robust, and Almost Irreversible Forgetting in LLMs","created":"2025-09-02","cited_by_count":11,"area":"safety"},{"id":"2406.11544","title":"Do Parameters Reveal More than Loss for Membership Inference?","created":"2024-06-17","cited_by_count":10,"area":"safety"},{"id":"2406.07698","title":"Label Smoothing Improves Machine Unlearning","created":"2024-06-11","cited_by_count":9,"area":"safety"},{"id":"2407.01251","title":"QUEEN: Query Unlearning against Model Extraction","created":"2024-07-01","cited_by_count":9,"area":"safety"},{"id":"2410.01276","title":"Deep Unlearn: Benchmarking Machine Unlearning for Image Classification","created":"2024-10-02","cited_by_count":9,"area":"safety"},{"id":"2412.08559","title":"Underestimated Privacy Risks for Minority Populations in Large Language Model Unlearning","created":"2024-12-11","cited_by_count":9,"area":"safety"},{"id":"2407.01919","title":"A Method to Facilitate Membership Inference Attacks in Deep Learning Models","created":"2024-07-02","cited_by_count":7,"area":"safety"},{"id":"2411.05743","title":"Free Record-Level Privacy Risk Evaluation Through Artifact-Based Methods","created":"2024-11-08","cited_by_count":7,"area":"safety"},{"id":"2508.09603","title":"The Surprising Effectiveness of Membership Inference with Simple N-Gram Coverage","created":"2025-08-13","cited_by_count":7,"area":"safety"},{"id":"2601.02751","title":"Window-based Membership Inference Attacks Against Fine-tuned Large Language Models","created":"2026-01-06","cited_by_count":7,"area":"safety"},{"id":"2402.05453","title":"Mitigating Privacy Risk in Membership Inference by Convex-Concave Loss","created":"2024-02-08","cited_by_count":6,"area":"safety"},{"id":"2403.17775","title":"Secure Aggregation is Not Private Against Membership Inference Attacks","created":"2024-03-26","cited_by_count":6,"area":"safety"},{"id":"2405.07018","title":"Shadow-Free Membership Inference Attacks: Recommender Systems Are More Vulnerable Than You Thought","created":"2024-05-11","cited_by_count":6,"area":"safety"},{"id":"2407.01306","title":"Unveiling the Unseen: Exploring Whitebox Membership Inference through the Lens of Explainability","created":"2024-07-01","cited_by_count":6,"area":"safety"},{"id":"2506.05126","title":"Membership Inference Attacks on Sequence Models","created":"2025-06-05","cited_by_count":6,"area":"safety"},{"id":"2310.03838","title":"Chameleon: Increasing Label-Only Membership Leakage with Adaptive Poisoning","created":"2023-10-05","cited_by_count":5,"area":"safety"},{"id":"2311.03865","title":"When Fairness Meets Privacy: Exploring Privacy Threats in Fair Binary Classifiers via Membership Inference Attacks","created":"2023-11-07","cited_by_count":5,"area":"safety"},{"id":"2407.02747","title":"Curvature Clues: Decoding Deep Learning Privacy with Input Loss Curvature","created":"2024-07-03","cited_by_count":5,"area":"safety"},{"id":"2409.03741","title":"Understanding Data Importance in Machine Learning Attacks: Does Valuable Data Pose Greater Harm?","created":"2024-09-05","cited_by_count":5,"area":"safety"},{"id":"2505.24089","title":"Practical Bayes-Optimal Membership Inference Attacks","created":"2025-05-30","cited_by_count":5,"area":"safety"},{"id":"2303.03648","title":"Can Membership Inferencing be Refuted?","created":"2023-03-07","cited_by_count":4,"area":"safety"},{"id":"2310.12665","title":"SecurityNet: Assessing Machine Learning Vulnerabilities on Public Models","created":"2023-10-19","cited_by_count":4,"area":"safety"},{"id":"2503.22413","title":"Instance-Level Data-Use Auditing of Visual ML Models","created":"2025-03-28","cited_by_count":4,"area":"safety"},{"id":"2510.13451","title":"Toward Efficient Inference Attacks: Shadow Model Sharing via Mixture-of-Experts","created":"2025-10-15","cited_by_count":4,"area":"safety"},{"id":"2212.02701","title":"On the Discredibility of Membership Inference Attacks","created":"2022-12-06","cited_by_count":3,"area":"safety"},{"id":"2307.06123","title":"SoK: Comparing Different Membership Inference Attacks with a Comprehensive Benchmark","created":"2023-07-12","cited_by_count":3,"area":"safety"},{"id":"2402.10065","title":"Some Targets Are Harder to Identify than Others: Quantifying the Target-dependent Membership Leakage","created":"2024-02-15","cited_by_count":3,"area":"safety"},{"id":"2502.09396","title":"A hierarchical approach for assessing the vulnerability of tree-based classification models to membership inference attack","created":"2025-02-13","cited_by_count":3,"area":"safety"},{"id":"2509.06796","title":"Imitative Membership Inference Attack","created":"2025-09-08","cited_by_count":3,"area":"safety"},{"id":"2509.07879","title":"Active Membership Inference Test (aMINT): Enhancing Model Auditability with Multi-Task Learning","created":"2025-09-09","cited_by_count":3,"area":"safety"},{"id":"2510.05699","title":"Membership Inference Attacks on Tokenizers of Large Language Models","created":"2025-10-07","cited_by_count":3,"area":"safety"},{"id":"2603.07567","title":"Revisiting the LiRA Membership Inference Attack Under Realistic Assumptions","created":"2026-03-08","cited_by_count":3,"area":"safety"},{"id":"2210.16258","title":"On the Vulnerability of Data Points under Multiple Membership Inference Attacks and Target Models","created":"2022-10-28","cited_by_count":2,"area":"safety"},{"id":"2310.08015","title":"Why Train More? Effective and Efficient Membership Inference via Memorization","created":"2023-10-12","cited_by_count":2,"area":"safety"},{"id":"2405.01207","title":"Improving Membership Inference in ASR Model Auditing with Perturbed Loss Features","created":"2024-05-02","cited_by_count":2,"area":"safety"},{"id":"2411.01357","title":"WaKA: Data Attribution using K-Nearest Neighbors and Membership Privacy Principles","created":"2024-11-02","cited_by_count":2,"area":"safety"},{"id":"2412.08549","title":"Watermarking Training Data of Music Generation Models","created":"2024-12-11","cited_by_count":2,"area":"safety"},{"id":"2502.06374","title":"Hyperparameters in Score-Based Membership Inference Attacks","created":"2025-02-10","cited_by_count":2,"area":"safety"},{"id":"2503.07482","title":"How does Bayesian Sampling help Membership Inference Attacks?","created":"2025-03-10","cited_by_count":2,"area":"safety"},{"id":"2505.03392","title":"Automatic Calibration for Membership Inference Attack on Large Language Models","created":"2025-05-06","cited_by_count":2,"area":"safety"},{"id":"2506.06003","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","created":"2025-06-06","cited_by_count":2,"area":"safety"},{"id":"2508.07066","title":"Membership Inference Attacks with False Discovery Rate Control","created":"2025-08-09","cited_by_count":2,"area":"safety"},{"id":"2510.05582","title":"(Token-Level) InfoRMIA: Stronger Membership Inference and Memorization Assessment for LLMs","created":"2025-10-07","cited_by_count":2,"area":"safety"},{"id":"2510.10625","title":"ImpMIA: Leveraging Implicit Bias for Membership Inference Attack","created":"2025-10-12","cited_by_count":2,"area":"safety"},{"id":"2602.02819","title":"Causal Evaluation of Membership Inference Attacks","created":"2026-02-02","cited_by_count":2,"area":"safety"},{"id":"2602.07126","title":"Finding Connections: Membership Inference Attacks for the Multi-Table Synthetic Data Setting","created":"2026-02-06","cited_by_count":2,"area":"safety"},{"id":"2605.01129","title":"Revisiting Privacy Leakage in Machine Unlearning: Membership Inference Beyond the Forgotten Set","created":"2026-05-01","cited_by_count":2,"area":"safety"},{"id":"2212.01688","title":"LDL: A Defense for Label-Based Membership Inference Attacks","created":"2022-12-03","cited_by_count":1,"area":"safety"},{"id":"2306.04109","title":"Membership inference attack with relative decision boundary distance","created":"2023-06-07","cited_by_count":1,"area":"safety"},{"id":"2307.05193","title":"Membership Inference Attacks on DNNs using Adversarial Perturbations","created":"2023-07-11","cited_by_count":1,"area":"safety"},{"id":"2402.01114","title":"Double-Dip: Thwarting Label-Only Membership Inference Attacks with Transfer Learning and Randomization","created":"2024-02-02","cited_by_count":1,"area":"safety"},{"id":"2403.06595","title":"Towards more accurate and useful data anonymity vulnerability measures","created":"2024-03-11","cited_by_count":1,"area":"safety"},{"id":"2407.17663","title":"Explaining the Model, Protecting Your Data: Revealing and Mitigating the Data Privacy Risks of Post-Hoc Model Explanations via Membership Inference","created":"2024-07-24","cited_by_count":1,"area":"safety"},{"id":"2502.13191","title":"On the Privacy Risks of Spiking Neural Networks: A Membership Inference Analysis","created":"2025-02-18","cited_by_count":1,"area":"safety"},{"id":"2504.16683","title":"MCMC for Bayesian estimation of Differential Privacy from Membership Inference Attacks","created":"2025-04-23","cited_by_count":1,"area":"safety"},{"id":"2505.07026","title":"Efficient Machine Unlearning by Model Splitting and Core Sample Selection","created":"2025-05-11","cited_by_count":1,"area":"safety"},{"id":"2506.00701","title":"Bayesian Inference of Training Dataset Membership","created":"2025-05-31","cited_by_count":1,"area":"safety"},{"id":"2506.06488","title":"Membership Inference Attacks for Unseen Classes","created":"2025-06-06","cited_by_count":1,"area":"safety"},{"id":"2506.09923","title":"Apollo: A Posteriori Label-Only Membership Inference Attack Towards Machine Unlearning","created":"2025-06-11","cited_by_count":1,"area":"safety"}],"next_cursor":"100"}